Curated security research, vulnerabilities, advisories and tools for practitioners.

Azure Privilege Escalation via Service Principal Abuse

specterops.io | vulnerability | #cloud

Summary

Intro and Prior Work On-prem Active Directory is here to stay, and so is Azure Active Directory. While these products have similar names, they in fact work very differently from one another. There are hints of vanilla AD’s discretionary access control model in Azure, but permissions in Azure are mostly controlled through granted roles. Regardless […]
Published
Collected